Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
File: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft (raw, json)
Hash identifier: qVrJeCY6cwOlsveaHYWsTFUsWUxR/mTGKnCvJXF4gG0=
Subject key identifier: 18:A9:5C:9D:8D:C0:B2:75:80:1B:FA:1F:6D:07:12:62:F5:94:54:8C
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial: 01965500BCC1D11A3924BE2546267C56B9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
Manifest number: 0C91
Signing time: Sun 20 Apr 2025 21:00:33 +0000
Manifest this update: Sun 20 Apr 2025 21:00:33 +0000
Manifest next update: Mon 21 Apr 2025 21:00:33 +0000
Files and hashes: 1: jjPkPnEOvwVnAAg20Sm72ha1828.roa (hash: qBKDLKoYMFIUxr740I0l1MbmN1H/LYeCtP9acHybLHY=)
2: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl (hash: lkDigvqncBd+H+Wk+SFdcoDd73Yii/kmGCJsMmmkCC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:bc:c1:d1:1a:39:24:be:25:46:26:7c:56:b9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Validity
Not Before: Apr 20 21:00:33 2025 GMT
Not After : Apr 21 21:00:33 2025 GMT
Subject: CN=18a95c9d8dc0b275801bfa1f6d071262f594548c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5f:0b:16:2d:24:0e:3e:fa:2f:a3:31:76:f4:
0c:2d:db:3f:90:09:c7:72:fa:56:53:dc:bf:f1:18:
d1:ba:fe:00:35:74:ae:56:0f:2d:77:19:f1:f4:38:
83:5f:7f:1d:6c:be:8a:1d:99:b0:9f:aa:8b:1c:79:
7f:75:48:af:7b:5d:da:aa:be:a4:f6:1e:1e:cf:4a:
1f:01:d5:05:13:f0:95:43:80:da:a8:47:82:ba:8a:
b9:1a:a9:84:48:c3:8b:cc:61:dd:10:49:df:fa:81:
b5:ec:a3:70:4b:de:81:34:51:9c:67:63:33:48:39:
9e:a2:6f:2f:8b:43:bd:96:4b:b6:3d:b0:1c:78:81:
0d:88:17:80:de:21:70:c9:9b:b7:2e:0c:5e:c5:35:
69:6a:4e:5b:13:ad:7d:25:95:c8:3a:ca:70:be:8a:
e7:08:dc:46:cb:36:1c:ce:c5:e6:da:61:d2:68:01:
18:f1:1b:6f:6d:27:6b:6a:d3:46:5b:36:14:d1:b6:
d3:29:0e:ee:48:ea:cf:2e:fd:05:29:af:74:8c:cb:
55:48:d6:6e:2b:46:aa:d5:44:7d:29:22:66:81:83:
da:c6:47:17:63:53:9e:a0:b2:d2:f6:fb:72:46:51:
62:3b:68:29:64:47:63:53:8e:57:b9:1c:9d:fe:3c:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A9:5C:9D:8D:C0:B2:75:80:1B:FA:1F:6D:07:12:62:F5:94:54:8C
X509v3 Authority Key Identifier:
keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f3:af:95:0f:a6:ed:9a:5e:df:a9:4a:29:6a:c8:38:78:b5:
1f:7b:6e:c0:7d:60:a7:0c:d0:8d:a2:5d:0a:9b:a8:9e:ee:f7:
ca:ed:fd:4d:87:39:f1:46:32:30:dc:d6:0c:23:4a:93:51:18:
7b:dc:52:24:57:cf:9a:08:52:2d:8a:31:f5:ee:14:b5:43:66:
53:33:01:b0:b9:7d:89:b3:d8:0d:ca:53:36:3f:50:fb:07:ea:
8b:1e:39:cd:81:c2:ab:a8:f7:4d:54:81:c2:dc:51:0d:16:70:
4c:1b:d2:38:75:8d:5b:a2:25:72:ba:76:c2:2b:2d:f4:5b:74:
38:47:1d:b3:3b:4d:d6:36:1e:4e:4c:a4:20:69:b0:a4:8f:0b:
f3:df:6a:d4:76:b0:37:a0:57:0b:02:ef:ec:b8:dc:03:a2:51:
b2:44:43:ac:dc:8f:18:87:f4:3a:e2:38:5c:f9:e5:ab:d6:39:
e1:d2:77:07:c3:f8:f5:cd:d0:43:4e:e8:c0:6f:6a:cf:87:a8:
05:4d:eb:a2:94:f7:7c:89:aa:bc:ff:be:70:a1:35:b9:6b:85:
e7:ab:31:fe:7a:5c:51:a6:3b:0c:bd:d3:ad:d3:f9:8c:ad:27:
7c:4b:d1:bc:b7:71:f1:34:47:e5:3b:fe:11:83:d0:ff:f0:ef:
69:31:a8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:48 2025 by rpki-client